Engineering notes from the trenches.
Reverse-engineering APIs, automation that survives production, security research, and honest takes on the tools I ship with.
Filtered by tag:#playwright×
Sort
3 posts ← reset filters
SecurityPlaywright's API Testing Isn't Just a Postman Replacement — It's a Security Swiss Army Knife
Playwright's request context goes far beyond replacing Postman — it's a programmable, scalable tool for API security testing, auth token replay, schema validation, and multi-step attack simulation. Here's how a pentester uses it.
Jun 19, 2026 · 11 min
AutomationStop Mocking at the Wrong Layer: Server-Side HTTP Interception in Playwright with mockttp
How to mock outgoing server-side HTTP requests in Playwright end-to-end tests using mockttp as a per-worker forward proxy, giving you deterministic control over third-party API calls without touching your application code.
May 27, 2026 · 12 min- Automation
CloakBrowser: I tested it against 5 bot detectors — here's what happened
CloakBrowser claims to be a stealth Chromium that passes every bot detection test. I installed it, ran it against reCAPTCHA v3, Cloudflare Turnstile, and FingerprintJS to see if the hype is real.
May 19, 2026 · 8 min